@uns-kit/core 3.0.33 → 3.0.35

package/dist/runtime/process-group-direct-contract.js

@@ -0,0 +1,151 @@
+import path from "node:path";
+import { z } from "zod";
+import { processGroupConfigurationSelectorSchema as selector } from "./process-group-contract.js";
+import { groupPlacementSchema, placementKey } from "./process-group-control-contract.js";
+const identity = z.string().regex(/^[a-z][a-z0-9-]{0,99}$/);
+const digest = z.string().regex(/^[a-f0-9]{64}$/);
+const absolute = z
+    .string()
+    .min(1)
+    .max(512)
+    .refine((v) => path.isAbsolute(v) && path.resolve(v) === v);
+const relative = z
+    .string()
+    .min(1)
+    .max(512)
+    .refine((v) => !path.isAbsolute(v) && path.normalize(v) === v && !v.split(/[\\/]/).some((p) => p === ".." || p === ".") && !v.includes("\0"));
+/** Package data, never launch authority. Selectors are reusable across applications. */
+const resource = z.discriminatedUnion("kind", [
+    z.strictObject({
+        kind: z.literal("file"),
+        manifestPath: selector,
+        manifests: z
+            .array(z.strictObject({ id: identity, file: relative }))
+            .min(1)
+            .max(64),
+    }),
+    z.strictObject({ kind: z.literal("configuration"), groupPath: selector }),
+]);
+export const processGroupDirectDescriptorSchema = z
+    .strictObject({
+    protocolVersion: z.literal(1),
+    namespace: identity,
+    publisherPath: selector,
+    journalPath: selector,
+    runtimeRolePath: selector,
+    directRole: identity,
+    resources: z.array(resource).min(1).max(2),
+    match: z.strictObject({ path: selector, value: z.string().min(1).max(100) }).optional(),
+})
+    .superRefine((v, c) => {
+    if (new Set(v.resources.map((r) => r.kind)).size !== v.resources.length)
+        c.addIssue({ code: "custom", message: "Distinct direct resource kinds required" });
+    for (const r of v.resources) {
+        const resourcePath = r.kind === "file" ? r.manifestPath : r.groupPath;
+        if (resourcePath.length <= v.publisherPath.length || !v.publisherPath.every((key, i) => resourcePath[i] === key))
+            c.addIssue({ code: "custom", message: "Direct resource selector must be a publisher leaf" });
+        if (r.kind === "file" &&
+            (new Set(r.manifests.map((m) => m.id)).size !== r.manifests.length || new Set(r.manifests.map((m) => m.file)).size !== r.manifests.length))
+            c.addIssue({ code: "custom", message: "Distinct direct manifest resources required" });
+    }
+    const paths = [v.publisherPath, v.journalPath, v.runtimeRolePath].map((p) => p.join("."));
+    if (new Set(paths).size !== paths.length || paths.some((p, i) => paths.some((q, j) => i !== j && q.startsWith(p + "."))))
+        c.addIssue({ code: "custom", message: "Distinct lifecycle selectors required" });
+});
+export const processGroupDirectInputSchema = z
+    .strictObject({
+    protocolVersion: z.literal(1),
+    source: z.strictObject({ publisher: groupPlacementSchema, receiver: groupPlacementSchema }),
+    target: groupPlacementSchema,
+})
+    .superRefine((v, c) => {
+    const all = [v.source.publisher, v.source.receiver, v.target];
+    if (new Set(all.map(placementKey)).size !== 3 ||
+        all.some((p) => p.controller !== all[0].controller || p.rttNode !== all[0].rttNode) ||
+        v.source.publisher.version !== v.source.receiver.version)
+        c.addIssue({ code: "custom", message: "Three distinct placements with one owning controller/package and one source-pair version required" });
+});
+export const processGroupDirectRequestSchema = z
+    .strictObject({
+    protocolVersion: z.literal(1),
+    controllerName: groupPlacementSchema.shape.controller,
+    id: z.string().uuid(),
+    action: z.enum(["preview", "prepare", "get", "execute", "rollback", "close-recovery"]),
+    input: processGroupDirectInputSchema.optional(),
+    expectedFingerprint: digest.optional(),
+    expectedRevision: z.number().int().positive().optional(),
+})
+    .superRefine((v, c) => {
+    if ((["preview", "prepare"].includes(v.action) && !v.input) ||
+        (["prepare", "execute", "rollback", "close-recovery"].includes(v.action) && !v.expectedFingerprint) ||
+        (["execute", "rollback", "close-recovery"].includes(v.action) && !v.expectedRevision) ||
+        (v.input && v.input.target.controller !== v.controllerName))
+        c.addIssue({ code: "custom", message: "Exact transition identity, owning member and reviewed revision required" });
+});
+export const retiredJournalReferenceSchema = z
+    .strictObject({
+    directory: absolute,
+    journalId: z.string().uuid(),
+    journalContractSha256: digest,
+    generationId: identity,
+    groupSha256: digest.optional(),
+    contractVersion: z.union([z.literal(1), z.literal(2)]),
+    maxRecords: z.number().int().min(1).max(100000),
+    maxBytes: z
+        .number()
+        .int()
+        .min(1024)
+        .max(256 * 1024 * 1024),
+    minFreeBytes: z
+        .number()
+        .int()
+        .min(0)
+        .max(1024 * 1024 * 1024),
+    profiles: z
+        .array(z.strictObject({ processName: identity, mappingSha256: digest, dataGroup: identity }))
+        .min(2)
+        .max(16),
+})
+    .superRefine((v, c) => {
+    if (v.contractVersion === 2 && !v.groupSha256)
+        c.addIssue({ code: "custom", message: "Configuration generation identity required" });
+    if (new Set(v.profiles.map((p) => p.processName)).size !== v.profiles.length)
+        c.addIssue({ code: "custom", message: "Distinct retained profiles required" });
+});
+const member = z.strictObject({
+    placement: groupPlacementSchema,
+    processName: identity,
+    configurationSha256: digest,
+    artifactSha256: digest,
+});
+export const processGroupRetirementPolicySchema = z
+    .strictObject({
+    schemaVersion: z.literal(5),
+    kind: z.literal("uns-process-group-direct-retirement"),
+    protocolVersion: z.literal(1),
+    operationId: z.string().uuid(),
+    packageName: z.string().min(1).max(214),
+    namespace: identity,
+    groupId: identity,
+    controllerName: groupPlacementSchema.shape.controller,
+    stateRoot: absolute,
+    recovery: z.enum(["open", "closed"]),
+    journal: retiredJournalReferenceSchema,
+    sourcePolicyJson: z.string().min(1).max(32768),
+    sourcePolicySha256: digest,
+    source: z.strictObject({
+        publisher: member.extend({ policyConfigurationSha256: digest }),
+        receiver: member.extend({ policyConfigurationSha256: digest }),
+    }),
+    target: member.extend({ packageRoot: absolute, descriptorSha256: digest, resourceSha256: digest, channelsSha256: digest }),
+})
+    .superRefine((v, c) => {
+    if (v.target.processName !== v.source.publisher.processName ||
+        v.source.receiver.processName === v.target.processName ||
+        v.source.publisher.placement.controller !== v.controllerName ||
+        v.source.receiver.placement.controller !== v.controllerName ||
+        v.target.placement.controller !== v.controllerName ||
+        v.journal.profiles.some((p) => [v.target.processName, v.source.receiver.processName].includes(p.processName)))
+        c.addIssue({ code: "custom", message: "Exact paired and direct ownership identities required" });
+});
+//# sourceMappingURL=process-group-direct-contract.js.map

package/dist/runtime/process-group-direct-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-group-direct-contract.js","sourceRoot":"","sources":["../../src/runtime/process-group-direct-contract.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,uCAAuC,IAAI,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAClG,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAEzF,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;AAC5D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAClD,MAAM,QAAQ,GAAG,CAAC;KACf,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9D,MAAM,QAAQ,GAAG,CAAC;KACf,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAEhJ,wFAAwF;AACxF,MAAM,QAAQ,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC5C,CAAC,CAAC,YAAY,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACvB,YAAY,EAAE,QAAQ;QACtB,SAAS,EAAE,CAAC;aACT,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;aACvD,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,EAAE,CAAC;KACX,CAAC;IACF,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;CAC1E,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC;KAChD,YAAY,CAAC;IACZ,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7B,SAAS,EAAE,QAAQ;IACnB,aAAa,EAAE,QAAQ;IACvB,WAAW,EAAE,QAAQ;IACrB,eAAe,EAAE,QAAQ;IACzB,UAAU,EAAE,QAAQ;IACpB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACxF,CAAC;KACD,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;IACpB,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM;QACrE,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC,CAAC;IACrF,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,IAAI,YAAY,CAAC,MAAM,IAAI,CAAC,CAAC,aAAa,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;YAC9G,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mDAAmD,EAAE,CAAC,CAAC;QAC/F,IACE,CAAC,CAAC,IAAI,KAAK,MAAM;YACjB,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;YAE1I,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1F,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACtH,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC,CAAC;AACrF,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC;KAC3C,YAAY,CAAC;IACZ,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IAC3F,MAAM,EAAE,oBAAoB;CAC7B,CAAC;KACD,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;IACpB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9D,IACE,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC,CAAE,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC;QACrF,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO;QAExD,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mGAAmG,EAAE,CAAC,CAAC;AACjJ,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC7C,YAAY,CAAC;IACZ,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7B,cAAc,EAAE,oBAAoB,CAAC,KAAK,CAAC,UAAU;IACrD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;IACtF,KAAK,EAAE,6BAA6B,CAAC,QAAQ,EAAE;IAC/C,mBAAmB,EAAE,MAAM,CAAC,QAAQ,EAAE;IACtC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACzD,CAAC;KACD,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;IACpB,IACE,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QACvD,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC;QACnG,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC;QACrF,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,CAAC,CAAC,cAAc,CAAC;QAE3D,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,yEAAyE,EAAE,CAAC,CAAC;AACvH,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC;KAC3C,YAAY,CAAC;IACZ,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC5B,qBAAqB,EAAE,MAAM;IAC7B,YAAY,EAAE,QAAQ;IACtB,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE;IAC9B,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IAC/C,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,IAAI,CAAC;SACT,GAAG,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,CAAC;SACR,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;SAC5F,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;CACX,CAAC;KACD,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;IACpB,IAAI,CAAC,CAAC,eAAe,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW;QAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC,CAAC;IACrI,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM;QAC1E,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC,CAAC;AACnF,CAAC,CAAC,CAAC;AAEL,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC;IAC5B,SAAS,EAAE,oBAAoB;IAC/B,WAAW,EAAE,QAAQ;IACrB,mBAAmB,EAAE,MAAM;IAC3B,cAAc,EAAE,MAAM;CACvB,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC;KAChD,YAAY,CAAC;IACZ,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,qCAAqC,CAAC;IACtD,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,SAAS,EAAE,QAAQ;IACnB,OAAO,EAAE,QAAQ;IACjB,cAAc,EAAE,oBAAoB,CAAC,KAAK,CAAC,UAAU;IACrD,SAAS,EAAE,QAAQ;IACnB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACpC,OAAO,EAAE,6BAA6B;IACtC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAC9C,kBAAkB,EAAE,MAAM;IAC1B,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,yBAAyB,EAAE,MAAM,EAAE,CAAC;QAC/D,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,yBAAyB,EAAE,MAAM,EAAE,CAAC;KAC/D,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;CAC3H,CAAC;KACD,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;IACpB,IACE,CAAC,CAAC,MAAM,CAAC,WAAW,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW;QACvD,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW;QACtD,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,UAAU,KAAK,CAAC,CAAC,cAAc;QAC5D,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,KAAK,CAAC,CAAC,cAAc;QAC3D,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,KAAK,CAAC,CAAC,cAAc;QAClD,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAE7G,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,uDAAuD,EAAE,CAAC,CAAC;AACrG,CAAC,CAAC,CAAC","sourcesContent":["import path from \"node:path\";\nimport { z } from \"zod\";\n\nimport { processGroupConfigurationSelectorSchema as selector } from \"./process-group-contract.js\";\nimport { groupPlacementSchema, placementKey } from \"./process-group-control-contract.js\";\n\nconst identity = z.string().regex(/^[a-z][a-z0-9-]{0,99}$/);\nconst digest = z.string().regex(/^[a-f0-9]{64}$/);\nconst absolute = z\n  .string()\n  .min(1)\n  .max(512)\n  .refine((v) => path.isAbsolute(v) && path.resolve(v) === v);\nconst relative = z\n  .string()\n  .min(1)\n  .max(512)\n  .refine((v) => !path.isAbsolute(v) && path.normalize(v) === v && !v.split(/[\\\\/]/).some((p) => p === \"..\" || p === \".\") && !v.includes(\"\\0\"));\n\n/** Package data, never launch authority. Selectors are reusable across applications. */\nconst resource = z.discriminatedUnion(\"kind\", [\n  z.strictObject({\n    kind: z.literal(\"file\"),\n    manifestPath: selector,\n    manifests: z\n      .array(z.strictObject({ id: identity, file: relative }))\n      .min(1)\n      .max(64),\n  }),\n  z.strictObject({ kind: z.literal(\"configuration\"), groupPath: selector }),\n]);\nexport const processGroupDirectDescriptorSchema = z\n  .strictObject({\n    protocolVersion: z.literal(1),\n    namespace: identity,\n    publisherPath: selector,\n    journalPath: selector,\n    runtimeRolePath: selector,\n    directRole: identity,\n    resources: z.array(resource).min(1).max(2),\n    match: z.strictObject({ path: selector, value: z.string().min(1).max(100) }).optional(),\n  })\n  .superRefine((v, c) => {\n    if (new Set(v.resources.map((r) => r.kind)).size !== v.resources.length)\n      c.addIssue({ code: \"custom\", message: \"Distinct direct resource kinds required\" });\n    for (const r of v.resources) {\n      const resourcePath = r.kind === \"file\" ? r.manifestPath : r.groupPath;\n      if (resourcePath.length <= v.publisherPath.length || !v.publisherPath.every((key, i) => resourcePath[i] === key))\n        c.addIssue({ code: \"custom\", message: \"Direct resource selector must be a publisher leaf\" });\n      if (\n        r.kind === \"file\" &&\n        (new Set(r.manifests.map((m) => m.id)).size !== r.manifests.length || new Set(r.manifests.map((m) => m.file)).size !== r.manifests.length)\n      )\n        c.addIssue({ code: \"custom\", message: \"Distinct direct manifest resources required\" });\n    }\n    const paths = [v.publisherPath, v.journalPath, v.runtimeRolePath].map((p) => p.join(\".\"));\n    if (new Set(paths).size !== paths.length || paths.some((p, i) => paths.some((q, j) => i !== j && q.startsWith(p + \".\"))))\n      c.addIssue({ code: \"custom\", message: \"Distinct lifecycle selectors required\" });\n  });\nexport type ProcessGroupDirectDescriptor = z.infer<typeof processGroupDirectDescriptorSchema>;\nexport const processGroupDirectInputSchema = z\n  .strictObject({\n    protocolVersion: z.literal(1),\n    source: z.strictObject({ publisher: groupPlacementSchema, receiver: groupPlacementSchema }),\n    target: groupPlacementSchema,\n  })\n  .superRefine((v, c) => {\n    const all = [v.source.publisher, v.source.receiver, v.target];\n    if (\n      new Set(all.map(placementKey)).size !== 3 ||\n      all.some((p) => p.controller !== all[0]!.controller || p.rttNode !== all[0]!.rttNode) ||\n      v.source.publisher.version !== v.source.receiver.version\n    )\n      c.addIssue({ code: \"custom\", message: \"Three distinct placements with one owning controller/package and one source-pair version required\" });\n  });\nexport type ProcessGroupDirectInput = z.infer<typeof processGroupDirectInputSchema>;\nexport const processGroupDirectRequestSchema = z\n  .strictObject({\n    protocolVersion: z.literal(1),\n    controllerName: groupPlacementSchema.shape.controller,\n    id: z.string().uuid(),\n    action: z.enum([\"preview\", \"prepare\", \"get\", \"execute\", \"rollback\", \"close-recovery\"]),\n    input: processGroupDirectInputSchema.optional(),\n    expectedFingerprint: digest.optional(),\n    expectedRevision: z.number().int().positive().optional(),\n  })\n  .superRefine((v, c) => {\n    if (\n      ([\"preview\", \"prepare\"].includes(v.action) && !v.input) ||\n      ([\"prepare\", \"execute\", \"rollback\", \"close-recovery\"].includes(v.action) && !v.expectedFingerprint) ||\n      ([\"execute\", \"rollback\", \"close-recovery\"].includes(v.action) && !v.expectedRevision) ||\n      (v.input && v.input.target.controller !== v.controllerName)\n    )\n      c.addIssue({ code: \"custom\", message: \"Exact transition identity, owning member and reviewed revision required\" });\n  });\nexport type ProcessGroupDirectRequest = z.infer<typeof processGroupDirectRequestSchema>;\nexport const retiredJournalReferenceSchema = z\n  .strictObject({\n    directory: absolute,\n    journalId: z.string().uuid(),\n    journalContractSha256: digest,\n    generationId: identity,\n    groupSha256: digest.optional(),\n    contractVersion: z.union([z.literal(1), z.literal(2)]),\n    maxRecords: z.number().int().min(1).max(100000),\n    maxBytes: z\n      .number()\n      .int()\n      .min(1024)\n      .max(256 * 1024 * 1024),\n    minFreeBytes: z\n      .number()\n      .int()\n      .min(0)\n      .max(1024 * 1024 * 1024),\n    profiles: z\n      .array(z.strictObject({ processName: identity, mappingSha256: digest, dataGroup: identity }))\n      .min(2)\n      .max(16),\n  })\n  .superRefine((v, c) => {\n    if (v.contractVersion === 2 && !v.groupSha256) c.addIssue({ code: \"custom\", message: \"Configuration generation identity required\" });\n    if (new Set(v.profiles.map((p) => p.processName)).size !== v.profiles.length)\n      c.addIssue({ code: \"custom\", message: \"Distinct retained profiles required\" });\n  });\nexport type RetiredJournalReference = z.infer<typeof retiredJournalReferenceSchema>;\nconst member = z.strictObject({\n  placement: groupPlacementSchema,\n  processName: identity,\n  configurationSha256: digest,\n  artifactSha256: digest,\n});\nexport const processGroupRetirementPolicySchema = z\n  .strictObject({\n    schemaVersion: z.literal(5),\n    kind: z.literal(\"uns-process-group-direct-retirement\"),\n    protocolVersion: z.literal(1),\n    operationId: z.string().uuid(),\n    packageName: z.string().min(1).max(214),\n    namespace: identity,\n    groupId: identity,\n    controllerName: groupPlacementSchema.shape.controller,\n    stateRoot: absolute,\n    recovery: z.enum([\"open\", \"closed\"]),\n    journal: retiredJournalReferenceSchema,\n    sourcePolicyJson: z.string().min(1).max(32768),\n    sourcePolicySha256: digest,\n    source: z.strictObject({\n      publisher: member.extend({ policyConfigurationSha256: digest }),\n      receiver: member.extend({ policyConfigurationSha256: digest }),\n    }),\n    target: member.extend({ packageRoot: absolute, descriptorSha256: digest, resourceSha256: digest, channelsSha256: digest }),\n  })\n  .superRefine((v, c) => {\n    if (\n      v.target.processName !== v.source.publisher.processName ||\n      v.source.receiver.processName === v.target.processName ||\n      v.source.publisher.placement.controller !== v.controllerName ||\n      v.source.receiver.placement.controller !== v.controllerName ||\n      v.target.placement.controller !== v.controllerName ||\n      v.journal.profiles.some((p) => [v.target.processName, v.source.receiver.processName].includes(p.processName))\n    )\n      c.addIssue({ code: \"custom\", message: \"Exact paired and direct ownership identities required\" });\n  });\nexport type ProcessGroupRetirementPolicy = z.infer<typeof processGroupRetirementPolicySchema>;\n"]}

package/dist/runtime/process-group-direct-review.d.ts

@@ -0,0 +1,203 @@
+import { type ProcessGroupDirectDescriptor } from "./process-group-direct-contract.js";
+import type { GenerationJournalReference } from "./process-group-generation.js";
+import type { UpgradeConfiguration } from "./process-group-upgrade.js";
+type Config = UpgradeConfiguration;
+export type DirectTransitionConfigurations = {
+    source: {
+        publisher: Config;
+        receiver: Config;
+    };
+    target: Config;
+};
+export declare function processGroupDirectDescriptor(packageRoot: string): ProcessGroupDirectDescriptor | undefined;
+export declare function describeDirectProcessGroup(c: Config): {
+    descriptor: {
+        protocolVersion: 1;
+        namespace: string;
+        publisherPath: string[];
+        journalPath: string[];
+        runtimeRolePath: string[];
+        directRole: string;
+        resources: ({
+            kind: "file";
+            manifestPath: string[];
+            manifests: {
+                id: string;
+                file: string;
+            }[];
+        } | {
+            kind: "configuration";
+            groupPath: string[];
+        })[];
+        match?: {
+            path: string[];
+            value: string;
+        };
+    };
+    resource: {
+        kind: "configuration";
+        groupPath: string[];
+    };
+    groupId: string;
+    processName: string;
+    resourceSha256: string;
+    profiles: {
+        processName: string;
+        mappingSha256: string;
+        dataGroup: string;
+    }[];
+    snapshot: import("./configuration-group-contract.js").ConfigurationGroupSnapshot;
+    manifest?: undefined;
+    manifestPath?: undefined;
+    manifestFile?: undefined;
+} | {
+    descriptor: {
+        protocolVersion: 1;
+        namespace: string;
+        publisherPath: string[];
+        journalPath: string[];
+        runtimeRolePath: string[];
+        directRole: string;
+        resources: ({
+            kind: "file";
+            manifestPath: string[];
+            manifests: {
+                id: string;
+                file: string;
+            }[];
+        } | {
+            kind: "configuration";
+            groupPath: string[];
+        })[];
+        match?: {
+            path: string[];
+            value: string;
+        };
+    };
+    resource: {
+        kind: "file";
+        manifestPath: string[];
+        manifests: {
+            id: string;
+            file: string;
+        }[];
+    };
+    groupId: string;
+    processName: string;
+    resourceSha256: string;
+    profiles: {
+        processName: string;
+        mappingSha256: string;
+        dataGroup: string;
+    }[];
+    manifest: {
+        schemaVersion: 1;
+        id: string;
+        inputTopic: string;
+        processName: string;
+        profiles: {
+            id: string;
+            processName: string;
+            mappingFile: string;
+            mappingSha256: string;
+            dataGroup: string;
+        }[];
+    };
+    manifestPath: string;
+    manifestFile: string;
+    snapshot?: undefined;
+};
+/** Data-only installed-resource review. Does not stop, initialize, rewrite or grant launch authority. */
+export declare function reviewInstalledProcessGroupDirectTransition(operationId: string, rawInput: unknown, configs: DirectTransitionConfigurations, stateRoot: string, excludedUnsFields?: readonly string[]): {
+    review: {
+        protocolVersion: 1;
+        kind: "paired-to-direct";
+        input: {
+            protocolVersion: 1;
+            source: {
+                publisher: {
+                    controller: string;
+                    rttNode: string;
+                    version: string;
+                    instanceId: string;
+                };
+                receiver: {
+                    controller: string;
+                    rttNode: string;
+                    version: string;
+                    instanceId: string;
+                };
+            };
+            target: {
+                controller: string;
+                rttNode: string;
+                version: string;
+                instanceId: string;
+            };
+        };
+        operationId: string;
+        policyFile: string;
+        sourcePolicySha256: string;
+        targetPolicySha256: string;
+        journal: GenerationJournalReference;
+        source: {
+            publisher: {
+                placement: {
+                    controller: string;
+                    rttNode: string;
+                    version: string;
+                    instanceId: string;
+                };
+                processName: string;
+                configurationSha256: string;
+                artifactSha256: string;
+                policyConfigurationSha256: string;
+            };
+            receiver: {
+                placement: {
+                    controller: string;
+                    rttNode: string;
+                    version: string;
+                    instanceId: string;
+                };
+                processName: string;
+                configurationSha256: string;
+                artifactSha256: string;
+                policyConfigurationSha256: string;
+            };
+        };
+        target: {
+            placement: {
+                controller: string;
+                rttNode: string;
+                version: string;
+                instanceId: string;
+            };
+            processName: string;
+            configurationSha256: string;
+            artifactSha256: string;
+            packageRoot: string;
+            descriptorSha256: string;
+            resourceSha256: string;
+            channelsSha256: string;
+        };
+        namespace: string;
+        groupId: string;
+        delivery: {
+            inputPausePossible: boolean;
+            exactlyOnceOutput: boolean;
+            brokerReplayNotTransferred: boolean;
+        };
+        usage: {
+            records: number;
+            bytes: number;
+            admitted: number;
+            completed: number;
+            lastSequence: number;
+        };
+    };
+    sourcePolicy: Buffer<ArrayBufferLike>;
+    targetPolicy: Buffer<ArrayBuffer>;
+};
+export {};
+//# sourceMappingURL=process-group-direct-review.d.ts.map

package/dist/runtime/process-group-direct-review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-group-direct-review.d.ts","sourceRoot":"","sources":["../../src/runtime/process-group-direct-review.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,KAAK,4BAA4B,EAMlC,MAAM,oCAAoC,CAAC;AAE5C,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAShF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAEvE,KAAK,MAAM,GAAG,oBAAoB,CAAC;AACnC,MAAM,MAAM,8BAA8B,GAAG;IAAE,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAMjH,wBAAgB,4BAA4B,CAAC,WAAW,EAAE,MAAM,GAAG,4BAA4B,GAAG,SAAS,CAK1G;AACD,wBAAgB,0BAA0B,CAAC,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsDnD;AA6BD,yGAAyG;AACzG,wBAAgB,2CAA2C,CACzD,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,OAAO,EACjB,OAAO,EAAE,8BAA8B,EACvC,SAAS,EAAE,MAAM,EACjB,iBAAiB,GAAE,SAAS,MAAM,EAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8J1C"}

package/dist/runtime/process-group-direct-review.js

@@ -0,0 +1,263 @@
+import fs from "node:fs";
+import path from "node:path";
+import { configurationGroupSnapshot, configurationResourceHash } from "./configuration-group-contract.js";
+import { authorizeProcessGroupRuntime, processGroupManifestSchema } from "./process-group-authorization.js";
+import { processGroupJournalContract, processGroupJournalSchema, processGroupSourceIdentity, readConfigurationSelector, resolvedProcessGroupChannels, } from "./process-group-contract.js";
+import { processGroupDirectDescriptorSchema, processGroupDirectInputSchema, processGroupRetirementPolicySchema, retiredJournalReferenceSchema, } from "./process-group-direct-contract.js";
+import { describeInstalledProcessGroupGeneration, inspectGenerationJournal } from "./process-group-generation.js";
+import { groupArtifactHash, groupChannelsHash, configurationAuthorizationHash as hash, readProcessGroupResource as read, sha256, } from "./process-group-resources.js";
+import { normalizeRuntimeProcessGroup, selectedProcessGroupDescriptor } from "./process-group-runtime-selection.js";
+const inside = (root, file) => {
+    const resolved = path.resolve(root, file);
+    if (!resolved.startsWith(path.resolve(root) + path.sep))
+        throw Error("Direct resource escapes installed package");
+    return read(resolved);
+};
+export function processGroupDirectDescriptor(packageRoot) {
+    const pkg = JSON.parse(read(path.join(packageRoot, "package.json")).toString());
+    return pkg.unsDatahub?.processGroupDirectRuntime === undefined
+        ? undefined
+        : processGroupDirectDescriptorSchema.parse(pkg.unsDatahub.processGroupDirectRuntime);
+}
+export function describeDirectProcessGroup(c) {
+    const descriptor = processGroupDirectDescriptor(c.packageRoot);
+    if (!descriptor ||
+        (descriptor.match && readConfigurationSelector(c.raw, descriptor.match.path) !== descriptor.match.value) ||
+        readConfigurationSelector(c.raw, descriptor.runtimeRolePath) !== descriptor.directRole ||
+        readConfigurationSelector(c.raw, descriptor.journalPath) !== undefined)
+        throw Error("Exact declared direct mode without an input journal required");
+    const publisher = readConfigurationSelector(c.raw, descriptor.publisherPath);
+    if (!publisher || typeof publisher !== "object" || Array.isArray(publisher))
+        throw Error("Explicit direct publisher required");
+    const selectedResources = descriptor.resources.filter((r) => readConfigurationSelector(c.raw, r.kind === "file" ? r.manifestPath : r.groupPath) !== undefined);
+    if (selectedResources.length !== 1)
+        throw Error("Select exactly one declared direct resource");
+    const resource = selectedResources[0];
+    if (resource.kind === "configuration") {
+        const snapshot = configurationGroupSnapshot(readConfigurationSelector(c.raw, resource.groupPath));
+        if (configurationResourceHash(readConfigurationSelector(c.resolved, resource.groupPath)) !==
+            configurationResourceHash(readConfigurationSelector(c.raw, resource.groupPath)))
+            throw Error("Resolved direct business resource differs from its reviewed configuration");
+        return {
+            descriptor,
+            resource,
+            groupId: snapshot.group.id,
+            processName: snapshot.group.processName,
+            resourceSha256: snapshot.sha256,
+            profiles: snapshot.profiles.map((p) => ({ processName: p.processName, mappingSha256: p.resourceSha256, dataGroup: p.dataGroup })),
+            snapshot,
+        };
+    }
+    const manifestPath = readConfigurationSelector(c.raw, resource.manifestPath);
+    const selected = resource.manifests.find((m) => m.file === manifestPath);
+    if (!selected)
+        throw Error("Unregistered direct manifest");
+    if (readConfigurationSelector(c.resolved, resource.manifestPath) !== selected.file)
+        throw Error("Resolved direct manifest selection changed");
+    const bytes = inside(c.packageRoot, selected.file), manifest = processGroupManifestSchema.parse(JSON.parse(bytes.toString()));
+    if (manifest.id !== selected.id)
+        throw Error("Direct manifest identity differs");
+    for (const p of manifest.profiles)
+        if (sha256(inside(c.packageRoot, path.join(path.dirname(selected.file), p.mappingFile))) !== p.mappingSha256)
+            throw Error("Direct profile resource changed");
+    return {
+        descriptor,
+        resource,
+        groupId: manifest.id,
+        processName: manifest.processName,
+        resourceSha256: sha256(bytes),
+        profiles: manifest.profiles.map(({ processName, mappingSha256, dataGroup }) => ({ processName, mappingSha256, dataGroup })),
+        manifest,
+        manifestPath: selected.file,
+        manifestFile: path.resolve(c.packageRoot, selected.file),
+    };
+}
+function remove(raw, keys) {
+    let current = raw;
+    const parents = [];
+    for (const key of keys.slice(0, -1)) {
+        const next = current[key];
+        if (!next || typeof next !== "object" || Array.isArray(next))
+            return;
+        parents.push([current, key]);
+        current = next;
+    }
+    delete current[keys.at(-1)];
+    for (const [parent, key] of parents.reverse()) {
+        const value = parent[key];
+        if (value && typeof value === "object" && !Object.keys(value).length)
+            delete parent[key];
+        else
+            break;
+    }
+}
+function projection(raw, d, excluded) {
+    const copy = structuredClone(raw);
+    remove(copy, d.journalPath);
+    remove(copy, d.runtimeRolePath);
+    for (const r of d.resources)
+        if (r.kind === "file")
+            remove(copy, r.manifestPath);
+    const uns = copy["uns"];
+    if (uns && typeof uns === "object" && !Array.isArray(uns))
+        for (const key of excluded)
+            delete uns[key];
+    // Removing a lifecycle leaf must not turn an otherwise empty publisher into a difference.
+    const publisher = readConfigurationSelector(copy, d.publisherPath);
+    if (publisher && typeof publisher === "object" && !Object.keys(publisher).length)
+        remove(copy, d.publisherPath);
+    return hash(copy);
+}
+/** Data-only installed-resource review. Does not stop, initialize, rewrite or grant launch authority. */
+export function reviewInstalledProcessGroupDirectTransition(operationId, rawInput, configs, stateRoot, excludedUnsFields = []) {
+    const input = processGroupDirectInputSchema.parse(rawInput), owner = input.target.controller, first = configs.source.publisher, target = configs.target;
+    const pkg = (c) => JSON.parse(read(path.join(c.packageRoot, "package.json")).toString());
+    for (const [p, c] of [
+        [input.source.publisher, first],
+        [input.source.receiver, configs.source.receiver],
+        [input.target, target],
+    ]) {
+        if (path.resolve(c.packageRoot, "instances", p.instanceId) !== c.instanceDirectory ||
+            fs.realpathSync(c.instanceDirectory) !== c.instanceDirectory ||
+            pkg(c).name !== p.rttNode ||
+            pkg(c).version !== p.version)
+            throw Error("Exact installed package and instance placement required");
+    }
+    const context = (c) => ({
+        packageRoot: c.packageRoot,
+        instanceDirectory: c.instanceDirectory,
+        rawConfiguration: c.raw,
+        channels: resolvedProcessGroupChannels(c.resolved),
+        controllerName: owner,
+        stateRoot,
+    });
+    const old = authorizeProcessGroupRuntime(context(first)), receiver = authorizeProcessGroupRuntime(context(configs.source.receiver));
+    if (old.role !== "target" ||
+        receiver.role !== "receiver" ||
+        old.file !== receiver.file ||
+        old.sha256 !== receiver.sha256 ||
+        old.directory !== receiver.directory ||
+        !old.journalId ||
+        old.journalId !== receiver.journalId)
+        throw Error("Exact authorized publisher/receiver owners required");
+    const sourcePolicy = read(old.file, true), sourceDescriptor = selectedProcessGroupDescriptor(first.packageRoot, first.raw);
+    if (!sourceDescriptor)
+        throw Error("Missing source shared contract");
+    const normalized = normalizeRuntimeProcessGroup(first.raw, sourceDescriptor), direct = describeDirectProcessGroup(target), d = direct.descriptor;
+    const namespace = sourceDescriptor.namespace;
+    if (d.namespace !== namespace ||
+        hash(d.publisherPath) !== hash(sourceDescriptor.publisherPath) ||
+        hash(d.journalPath) !== hash(sourceDescriptor.journalPath) ||
+        hash(d.runtimeRolePath) !== hash(sourceDescriptor.runtimeRolePath) ||
+        direct.groupId !== old.groupId ||
+        direct.processName !== old.groupProcessName ||
+        target.raw["uns"]?.["processName"] !== old.groupProcessName ||
+        projection(first.raw, d, excludedUnsFields) !== projection(target.raw, d, excludedUnsFields))
+        throw Error("Direct business configuration, selector or group identity changed");
+    const channels = groupChannelsHash(context(first).channels);
+    if (channels !== groupChannelsHash(context(configs.source.receiver).channels) || channels !== groupChannelsHash(context(target).channels))
+        throw Error("Direct broker/channel identity changed");
+    for (const c of [first, configs.source.receiver, target])
+        if (resolvedProcessGroupChannels(c.resolved)[2].publishQueue?.enabled === true)
+            throw Error("Initial direct retirement requires disabled disk MQTT output");
+    let reference, sourceResourceSha256;
+    if (sourceDescriptor.protocolVersion === 2) {
+        if (direct.resource.kind !== "configuration" || !direct.snapshot)
+            throw Error("Resource kind must remain configuration based");
+        const generation = describeInstalledProcessGroupGeneration(first);
+        reference = generation.reference;
+        sourceResourceSha256 = configurationGroupSnapshot(readConfigurationSelector(first.raw, sourceDescriptor.groupPath)).sha256;
+    }
+    else {
+        if (direct.resource.kind !== "file" || !direct.manifest)
+            throw Error("Resource kind must remain file based");
+        const journal = processGroupJournalSchema.parse(normalized.journal);
+        const declared = sourceDescriptor.manifests.find((m) => m.file === journal.groupManifest);
+        if (!declared)
+            throw Error("Unregistered original manifest");
+        const bytes = inside(first.packageRoot, declared.file), manifest = processGroupManifestSchema.parse(JSON.parse(bytes.toString()));
+        sourceResourceSha256 = sha256(bytes);
+        const contract = processGroupJournalContract(processGroupSourceIdentity(context(first).channels[1]), journal, manifest.profiles);
+        reference = {
+            directory: old.directory,
+            journalId: old.journalId,
+            journalContractSha256: sha256(contract),
+            generationId: manifest.id,
+            contractVersion: 1,
+            maxRecords: journal.maxRecords,
+            maxBytes: journal.maxBytes,
+            minFreeBytes: journal.minFreeBytes,
+            profiles: manifest.profiles.map(({ processName, mappingSha256, dataGroup }) => ({ processName, mappingSha256, dataGroup })),
+        };
+    }
+    const journal = retiredJournalReferenceSchema.parse(reference);
+    if (sourceResourceSha256 !== direct.resourceSha256 || hash(journal.profiles) !== hash(direct.profiles))
+        throw Error("Direct profile resources, paths or units changed");
+    const usage = inspectGenerationJournal(journal); // Pending work is allowed at preview, never at policy switch.
+    if (!Buffer.from(sourcePolicy.toString(), "utf8").equals(sourcePolicy))
+        throw Error("Original policy encoding cannot be retained exactly");
+    const member = (placement, c) => ({
+        placement,
+        processName: String(c.raw["uns"]["processName"]),
+        configurationSha256: hash(c.raw),
+        artifactSha256: groupArtifactHash(c.packageRoot),
+    });
+    const policy = processGroupRetirementPolicySchema.parse({
+        schemaVersion: 5,
+        kind: "uns-process-group-direct-retirement",
+        protocolVersion: 1,
+        operationId,
+        packageName: pkg(first).name,
+        namespace,
+        groupId: old.groupId,
+        controllerName: owner,
+        stateRoot,
+        recovery: "open",
+        journal,
+        sourcePolicyJson: sourcePolicy.toString(),
+        sourcePolicySha256: sha256(sourcePolicy),
+        source: {
+            publisher: {
+                ...member(input.source.publisher, first),
+                policyConfigurationSha256: sourceDescriptor.protocolVersion === 2 ? configurationResourceHash(first.raw) : hash(first.raw),
+            },
+            receiver: {
+                ...member(input.source.receiver, configs.source.receiver),
+                policyConfigurationSha256: sourceDescriptor.protocolVersion === 2 ? configurationResourceHash(configs.source.receiver.raw) : hash(configs.source.receiver.raw),
+            },
+        },
+        target: {
+            ...member(input.target, target),
+            packageRoot: target.packageRoot,
+            descriptorSha256: hash(d),
+            resourceSha256: direct.resourceSha256,
+            channelsSha256: channels,
+        },
+    });
+    if (sha256(read(old.file, true)) !== policy.sourcePolicySha256)
+        throw Error("Original policy changed during direct review");
+    const targetPolicy = Buffer.from(JSON.stringify(policy));
+    if (targetPolicy.length > 65536)
+        throw Error("Retirement policy byte budget exceeded");
+    return {
+        review: {
+            protocolVersion: 1,
+            kind: "paired-to-direct",
+            input,
+            operationId,
+            policyFile: old.file,
+            sourcePolicySha256: sha256(sourcePolicy),
+            targetPolicySha256: sha256(targetPolicy),
+            journal,
+            source: policy.source,
+            target: policy.target,
+            namespace,
+            groupId: old.groupId,
+            delivery: { inputPausePossible: true, exactlyOnceOutput: false, brokerReplayNotTransferred: true },
+            usage,
+        },
+        sourcePolicy,
+        targetPolicy,
+    };
+}
+//# sourceMappingURL=process-group-direct-review.js.map